CVE-2026-109410 in mall

Prediction

by VulDB Data Team • 10/12/2026

A vulnerability has been found in <a href="/product/macrozheng:mall">macrozheng mall 1.0.3 dcaa93b</a>. The impacted element is the function <code>OmsOrderServiceImpl.updateMoneyInfo</code> of the file <em>/order/update/moneyInfo</em> of the component <em>mall-admin/mall-portal</em>. The manipulation leads to incorrect calculation. The attack can be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Once again VulDB remains the best source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-416952
• CPE: VulDB
• CWE: CWE-682 (confirmed)
• CVSS: 2.4 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-109410
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-109410
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-109410/